CVE-2025-58180

CVE-2025-58180 RCE in OctoPrint via Unsanitized Filename in File Upload In OctoPrint version =1.11.2, an attacker with file upload access e.g., valid API key or session can craft a malicious filename that bypasses sanitization and is later executed by OctoPrint’s event system, leading to remote...

CVE-2026-96933

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83848

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83830

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83785

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96933

The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...

EUVD-2026-100252

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83830

A heap-based buffer overflow exists in the Windows COM+ Event System Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific details regarding the root cause, affected versions, or available exploits are provided in the documents. Remediation...

CVE-2026-83785

A Use after free vulnerability exists in the Windows COM+ Event System Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions or exploit links are provided in the documents; however, a remediation level of OFFICIAL_FIX is indicated.

CVE-2026-83848

A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

PT-2026-112579

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description A use-after-free condition in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruptio...

PT-2026-112597

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows COM+ Event System Service. This issue allows an authorized attacker to elevate privileges locally on the system. A...

CVE-2026-96933: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83785: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83830: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96933: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...